I have contracted a Virus that shows many Ads

Writer said:

Are the expanded items I sent you sufficient for this time?

Yes, that's fine thanks.

Writer said:

Concerning the Icon: when I mouse over the Icon, a large rectangular window appears and in it is says that what you requested is enabled. But this rectangular window doesn't stay long enough for me to get a screen shot. Is there some trick to doing a "middle-click?"

No, with the standard Snippet program, you can't grab a popup/tooltip window like that. It's ok. At the right of the icon is a very small down arrow. Click on that to get the settings for enable/disable.

My Defender Key list



Your Defender Key list



You are missing two:
DisableAntiSpyware and DisableAntiVirus

You have two that I do not:
ManagedDefenderProductType and ProductAppDataPath

Let's see what @lx07 has in his registry. Then, tomorrow we will make some edits. I have asked him to post his here as well.

Writer said:

I think I figured out the Icon situation: the word enable does not appear when you click on the little arrow. The key word that does appear is "disable," and to the left of the word disable - which appears three times - there is a check-mark. By clicking on the spot that is provided for the check-mark, the check-mark will appear and disappear. It seems that when there is no check-mark there, it means that the action is enabled. It seems they engineered this a bit complicated.

I do not have a check-mark to the left of the three "disable" options.

Understood. You can put the checkmark at the one I suggested. Thanks.

Writer said:

The comparison with @lx07 sounds like a good idea. Perhaps with others as well.

Okay. Tomorrow we will attack Defender's registry entries.

Writer said:

Did you read my previous post about the illusive icon? I think I figured it out.

Yes, see above.

Writer said:

Is the classroom session over for the day?

YES!

Writer said:

How many credit hours do I get for this intensive course in advanced Virus Detection?

You will be a malware crusher extraordinaire by tomorrow, and I will retire!

Please be sure to follow my instructions in this post:
Solved I have contracted a Virus that shows many Ads - Page 14 - Windows 10 Forums

This should get rid of the DLL error.

Thanks @lx07
@Writer,
The message we received early on is that your Windows Defender was turned off by Group Policy (by the virus).

Windows Defender

This app is turned off by group policy

If you’re using another app to check for malicious or unwanted software, use Security and Maintenance to check that app’s status.

To allow this app to run, contact your security administrator to enable the program via group policy.

Please have a look at this tutorial here, Option One, and follow the instructions to turn Defender back on, by modifying the registry using Group Policy.

Windows Defender - Turn On or Off in Windows 10 - Windows 10 Forums

If you have W10 Professional, you will be able to do this. If you have W10 Home, you may not have this available.

Option Two will give you a download to make the change. If you can't do Option One, then do Option Two.

And, please don't forget to do this:

Please be sure to follow my instructions in this post:
Solved I have contracted a Virus that shows many Ads - Page 14 - Windows 10 Forums

This should get rid of the DLL error.

I will be unavailable for several hours this morning, and will check in when I can.
Good luck! :)